Oracle^® Rack Universal Power Distribution Unit User's Guide

Add a Role-Based Access Control Rule

1. To add a new IPv4 role-based access control rule at the bottom of the IPv4 rules list, at the config:# prompt, type security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role> <policy>, and press Enter.

   For example, to add a new IPv4 role-based access control rule, dropping all packets from any IPv4 address between 192.168.78.50 and 192.168.90.100 when the user is a member of the role "admin," and insert the rule above the 3rd rule, at the config:# prompt, type security roleBasedAccessControl ipv4 rule add 192.168.78.50 192.168.90.100 admin deny insertAbove 3, and press Enter. The original 3rd rule becomes the 4th rule.

2. To add a new IPv6 role-based access control rule at the bottom of the IPv4 rules list, at the config:# prompt, type security roleBasedAccessControl ipv6 rule add <start_ip> <end_ip> <role> <policy>, and press Enter.
3. To add a new IPv4 role-based access control rule by inserting it above or below a specific rule, at the config:# prompt, type security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role> <policy> <insert> <rule_number>, and press Enter.
4. To add a new IPv6 role-based access control rule by inserting it above or below a specific rule, at the config:# prompt, type security roleBasedAccessControl ipv6 rule add <start_ip> <end_ip> <role> <policy> <insert> <rule_number>, and press Enter.

   • <start_ip> is the starting IP address.

   • <end_ip> is the ending IP address.

   • <role> is the role for which you want to create an access control rule.

   <policy> is one of these options:

   • allow – Accepts traffic from the specified IP address range when the user is a member of the specified role.

   • deny – Drops traffic from the specified IP address range when the user is a member of the specified role.

   <insert> is one of the options:

   Insert Description insertAbove Inserts the new rule above the specified rule number. Then: new rule number = the specified rule number <rule_number> is the number of the existing rule which you want to insert the new rule above. insertBelow Inserts the new rule below the specified rule number. Then: new rule number = the specified rule number + 1 <rule_number> is the number of the existing rule which you want to insert the new rule below.